Head of Threat Research

Bitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. Companies rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss.
Built on over a decade of technological innovation, its integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance, and data analysis.

• We invented the cyber ratings industry in 2011
• Over 3500 customers trust Bitsight
• Over 600 teammates are dispersed throughout Boston, Raleigh, New York, Lisbon, Singapore, and remote

The Head of Threat Research will lead a high-impact team dedicated to expanding Bitsight's ability to detect compromised systems worldwide. This role involves driving innovation in our data collection strategies, specifically focusing on broad-scale opportunistic domain sinkholing, bot emulation, and other malware tracking techniques to develop one of the world’s largest victim intelligence capabilities. This role will own the domain and malware triage workflows in addition to setting priorities for targeted malware investigations. They additionally will serve as the primary champion and advocate for enhancing Bitsight’s suite of product features with an evolving set of victim intelligence capabilities and data.

Objectives & Responsibilities

• Establish team priorities for research and development of new victim intelligence collection and analysis capabilities to maximize coverage of impactful victim intelligence

• Lead, mentor, and grow the team of malware researchers and analysts

• Spearhead the development and deployment of next-generation malware emulators, trackers, and crawlers to collect infections telemetry.

• Drive research initiatives into complex C2 communication channels (e.g., P2P, direct IP, hybrid models) to maintain visibility over botnets.

• Own victim intelligence data quality and drive continuous improvement

• Partner with product, engineering, and data science teams to translate threat telemetry into scalable product capabilities.

Qualifications

• Broad subject matter expertise across malware infrastructure and C2 methodologies

• Experience developing detection rules and extracting IOCs from malware analysis

• Demonstrated experience in managing and leading high-performing technical teams in a research or security-focused environment.

• Demonstrated success in architecting complex technical workflows, such as malware analysis, telemetry collection, or large-scale data processing